Remote IT Security Governance Analyst

Apollo Technology Solutions LLC; Richmond (VA); Remote; USD 90,000 - 130,000; Full time

Job summary

Apollo Technology Solutions LLC in Richmond, VA is seeking an IT Security Governance Analyst to lead security governance, risk assessments, and compliance activities across systems, data, and vendors. The role applies NIST, HIPAA, CJIS, and related standards to protect information assets and support audits.

You will maintain risk registers, partner with system and data owners, review third-party security documents, and coordinate remediation actions, training, and executive reporting.

Qualifications

• Knowledge of cybersecurity governance, risk management, and audit practices.
• Ability to apply NIST 800-53, CJIS, VCIN, HIPAA, PCI, FERPA, and privacy requirements.
• Experience documenting assessments, risk registers, and executive briefings.
• Ability to manage multiple projects with diverse stakeholders.

Responsibilities

• Conduct security risk assessments, BIAs, data classifications, and privacy reviews for systems and services.
• Maintain risk registers, corrective-action plans, evidence, and follow-up in governance tools.
• Coordinate remediation commitments, due dates, and executive decisions.
• Review vendor security documentation, SOC reports, and MOUs for gaps and controls.
• Develop and communicate security policies, standards, and governance processes.

Skills

Governance & risk management

Documentation

Executive communication

Multitasking

Audit coordination

Tools

Archer GRC

Job description

Apollo Technology Solutions LLC in Richmond, VA is seeking an IT Security Governance Analyst to lead security governance, risk assessments, and compliance activities across systems, data, and vendors. The role applies NIST, HIPAA, CJIS, and related standards to protect information assets and support audits.

You will maintain risk registers, partner with system and data owners, review third-party security documents, and coordinate remediation actions, training, and executive reporting.